Skip to content

ci: pin GitHub Actions to commit SHAs - #14

Merged
scottmckenzie merged 1 commit into
masterfrom
fix/pin-actions
Oct 16, 2026
Merged

scottmckenzie merged 1 commit into
masterfrom
fix/pin-actions

Conversation

@scottmckenzie

Copy link
Copy Markdown
Owner

Pins actions/checkout and astral-sh/setup-uv to commit SHAs and adds the rule to CLAUDE.md.

  • actions/checkout@v5 → fbc6f39… # v5.1.0
  • astral-sh/setup-uv@v6 → d0cc045… # v6.8.0

These are the commits the v5 and v6 tags point to today, so CI runs exactly the same code. actionlint passes.

Not upgraded to the current majors (checkout v7, setup-uv v10); that is a separate change.

🤖 Generated with Claude Code

https://claude.ai/code/session_01NmFYyD2mPB84VpFUbdvbw6

Pinned to the commits the v5 and v6 tags point to now, so CI runs the same
code. CLAUDE.md now requires SHA pins.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01NmFYyD2mPB84VpFUbdvbw6
@scottmckenzie
scottmckenzie merged commit 4786443 into master Oct 16, 2026
4 checks passed
@scottmckenzie
scottmckenzie deleted the fix/pin-actions branch October 16, 2026 22:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant